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CROSS REFERENCE TO RELATED APPLICATIONS 
This application is based on and incorporates herein by 
5 reference Japanese Patent Application No . 2003-45679 filed on 
February 24 , 2003. 



FIELD OF THE INVENTION 
The present invention relates to a processing system 
10 having multiple electronic units/ the processing system where 
operation programs executed by the respective electronic units 
are rewritten. 

BACKGROUND OF THE INVENTION 

15 An electronic unit is well-known that operates according 

to an operation program stored in a non-volatile memory of the 
electronic unit itself. In this electronic unit, the operation 
program stored in the non-volatile memory can be rewritten (or 
updated), using an external unit that is separately prepared , 

20 for version upgrade of the program. 

In detail , a boot program is previously stored in a non- 
volatile memory/ for communicating with an external unit and 
downloading a rewrite program (software) for rewriting. As the 
rewrite program is downloaded using the boot program, the 

25 processing sequence is handed over to the rewrite program. The 
rewrite program retrieves an operation program for rewriting and 
stores it in the non-volatile memory. 
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Recently, a processing system having multiple electronic 
units becomes available. In this processing system, when 
individual operation programs of the electronic units are 
rewritten, a boot program of a primary electronic unit of the 
5 multiple electronic units is used for downloading the rewrite 
programs of the primary electronic unit and other secondary 
electronic units . 

However, this processing system includes various 
conditions. For instance, a given processing system has no 
10 secondary electronic unit, while a certain processing system has 
a secondary electronic unit prohibiting the rewriting of its 
operation program. Therefore, the boot program stored in the 
primary electronic unit needs to be prepared and appropriately 
applied for each of the various conditions. 

15 

SUMMARY OF THE INVENTION 
It is an object of the present invention to provide a 
processing system having multiple electronic units, the 
processing system which includes a boot program can be used for 
20 various conditions of the processing system. 

To achieve the above object, a processing system 
including at least two electronic units is provided with the 
following. Each electronic unit stores an operating program. It 
retrieves, from an external unit, a rewrite program for 
25 rewriting the stored operation program. It newly retrieves, from 
the external unit or the other electronic unit, an operation 
program by executing the retrieved rewrite program. It then 



rewrites the stored operation program using the newly retrieved 
operation program. Here, the rewrite program for a first 
(primary) electronic unit includes a transfer routine for 
transferring to a second (secondary) electronic unit a rewrite 
5 program for the second electronic unit. When the first 
electronic unit receives, from the external unit, a rewrite 
request for rewriting the second operation program, the first 
electronic unit executes the transfer routine to transfer the 
second rewrite program to the second electronic unit. 
10 In this structure, the retrieving means (boot program) 

of the first (primary) electronic unit only needs to have a 
function of retrieving the own rewrite program. This eliminates 
need of changing the retrieving means for various conditions, 
simplifying a structure of the boot program itself. 

15 

BRIEF DESCRIPTION OF THE DRAWINGS 
The above and other objects, features, and advantages of 
the present invention will become more apparent from the 
following detailed description made with reference to the 
20 accompanying drawings. In the drawings: 

FIG. 1 is a block diagram showing an overall structure 
of a processing system according to an embodiment of the present 
invention; 

FIGs. 2A, 2B are diagrams showing orders of outputting 
25 programs from a program rewrite unit according to the 
embodiment; 

FIG. 3 is a flowchart diagram explaining a main 
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processing of the processing system according to the embodiment; 

FIG. 4 is a flowchart diagram explaining processing of 
rewriting a control program according to the embodiment; 

FIG 5 is a diagram showing a data flow in the 
5 processing in FIG. 4; 

FIG. 6 is a diagram showing an order of outputting 
programs from a program rewrite unit according to a modification 
of the present invention; and 

FIG. 7 is a flowchart diagram explaining processing of 
10 rewriting a control program according to the modification. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENTS 
A processing system according to an embodiment of the 
present invention is constructed as an electronic control unit 
15 (ECU) 1 for engine control of a vehicle. The ECU 1 includes a 
microcomputer ((^-computer ) A3, a microcomputer (^-computer) B 4, 
and an external I/O circuit 2. 

The external I/O circuit 2 receives sensor information 
from various sensors 6 for detecting operating states of an 
20 engine 5, to output the sensor information to the microcomputer 
A 3 and microcomputer B 4. It further receives control signals 
from the microcomputer A 3 or microcomputer B 4 to output the 
control signals to an actuator A 71 and an actuator B 72. 

The microcomputer A 3 as a primary unit has a flash 
25 memory 31, a RAM 32, an I/O circuit 33, and a CPU 34. The flash 
memory 31 of a non-volatile memory stores a control program 
(operation program) executed by the microcomputer A 3. The flash 
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memory 31 further has a boot program executed at a starting and 
resetting timings of this processing system. The boot program as 
a retrieving means reads (retrieves) a rewrite program for 
rewriting the control program from an external unit. 
5 The RAM 32 as a memory temporarily stores a result 

computed by the CPU 34 executing the control program, and 
further stores the rewrite program retrieved by the boot program 
when the control program is rewritten. This structure enables a 
storing area of the RAM 32 to be used for a storing area when 
10 the microcomputer A 3 executes the control program after the 
control program is rewritten, enhancing efficiency of the 
storing area. 

The I/O circuit 33 receives the sensor information from 
the external I/O circuit 2 to output the sensor information to 

15 the CPU 34. It further receives the control signals for the 
actuator A 71 outputted from the CPU 34 to output them to the 
external I/O circuit 2. By contrast, when the control program 
stored in the flash memory 31 is rewritten, the I/O circuit 33 
retrieves a control program or a rewrite program from a program 

20 rewrite unit 8 to output it to the CPU 34 or the microcomputer B 
4. 

The CPU 34 is constructed of a well-known micro- 
processor. The CPU 34 usually operates according to the control 
program stored in the fl,ash memory 31 and generates control 
25 signals for controlling the actuator A 71 based on the received 
sensor information from the I/O circuit 33. The generated 
control signals are outputted to the I/O circuit 33. By 



contrast, when the control program stored in the flash memory 31 
is rewritten , the CPU 34 retrieves using the boot program the 
control program outputted from the program rewrite unit 8 via 
the I/O circuit 33, and stores it in the RAM 32, Thereafter, the 
5 CPU 34 invokes the rewrite program from the RAM 32 to execute 
it, and retrieves the control program outputted from the program 
rewrite unit 8 via the I/O circuit 33. The CPU 34 further then 
rewrites the control program stored in the flash memory 31 or 
outputs a program to the microcomputer B4 . 
10 In particular, in this embodiment, the rewrite program 

executed by the microcomputer A 3 includes a transfer routine 
for transferring to the microcomputer B 4 a rewrite program for 
the microcomputer B 4 that is retrieved from the program rewrite 
unit 8. By executing the transfer routine, the CPU 34 transfers 
15 the retrieved rewrite program for the microcomputer B 4 via the 
I/O circuit 33 to the microcomputer B 4. 

The microcomputer B 4 as a secondary unit has a flash 
memory 41, a RAM 42, an I/O circuit 43, and a CPU 44, and 
controls the actuator B 72. The flash memory 41 of a non- 
20 volatile memory stores a control program (operation program) for 
controlling the actuator B 72. The flash memory 41 further has a 
boot program executed at a starting and resetting timings of 
this processing system. 

The RAM 42 as a memory temporarily stores a result 
25 computed by the CPU 44 executing the control program, and 
further stores a rewrite program retrieved by the boot program 
when the control program is rewritten. 



The I/O circuit 43 receives the sensor information from 
the external I/O circuit 2 to output the sensor information to 
the CPU 44 , and receives the control signals for the actuator B 
7 2 outputted from the CPU 44 to output them to the external I/O 
5 circuit 2. By contrast, when the control program stored in the 
flash memory 41 is rewritten, the I/O circuit 43 retrieves a 
control program or a rewrite program from the microcomputer A 3 
to output it to the CPU 44. 

The CPU 44 is constructed of a well-known micro- 

10 processor. The CPU 44 usually operates according to the control 
program stored in the flash memory 41 and generates control 
signals for controlling the actuator B 72 based on the received 
sensor information from the I/O circuit 43. The generated 
control signals are outputted to the I/O circuit 43. By 

15 contrast, when the control program stored in the flash memory 31 
is rewritten, the CPU 44 retrieves using the boot program the 
control program outputted from the microcomputer A 3 via the I/O 
circuit 43, to store it in the RAM 42. Thereafter, the CPU 44 
invokes the rewrite program from the RAM 42 to execute it, and 

20 then rewrites the control program stored in the flash memory 41 
into the control program newly outputted from the microcomputer 
A 3. 

The program rewrite unit 8 as an external unit outputs a 
control program and rewrite program to the microcomputer A 3. 
25 When only a control program for the microcomputer A 3 is 
rewritten, the control program for the microcomputer A 3 is 
outputted after a rewrite program for the microcomputer A 3 is 



outputted, as shown in FIG. 2A. By contrast, when both the 
control programs for the microcomputer A 3 and microcomputer B 4 
are rewritten, a rewrite program and control program for the 
microcomputer B 4 are outputted after a rewrite program and 
control program for the microcomputer A 3 are outputted, as 
shown in FIG. 2B. 

Next, processing at a starting or resetting timing of 
the processing system will be explained with reference to FIG. 
3 . This flowchart is repeatedly executed each time a power 
switch (not shown) of this system is turned on or a reset switch 
(not shown) is pushed. 

At Step 301, the microcomputer A 3 determines whether 
the program rewrite unit 8 is being connected with the ECU 1 for 
engine control. When it is being connected, the processing 
proceeds to Step 302. When it is not being connected, the 
processing proceeds to Step 303. 

At Step 302, the control programs for the microcomputer 
A 3 and microcomputer B 4 are rewritten, terminating the 
processing. This processing at Step 302 will be explained later 
in detail. By contrast, at Step 303, the microcomputer A 3 and 
microcomputer B 4 invoke the control programs from the flash 
memory 31 and flash memory 41, respectively, starting operation 
control of the engine 5 . 

Next, the processing at Step 302 for rewriting a control 
program will be explained with reference to FIGs. 4, 5. FIG. 4 
shows a flowchart of the processing, while FIG. 5 shows a data 
flow in the processing in FIG. 4. Here, the program rewrite unit 
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8 outputs the control program and rewrite program in an order 
shown in FIG. 2A or FIG. 2B. 

At Step 401, the microcomputer A 3 retrieves the rewrite 
program from the program rewrite unit 8 using the boot program 
to store it in the RAM 32 (arrow 51 in FIG. 5). At Step 402, the 
microcomputer A 3 invokes using the boot program the rewrite 
program stored in the RAM 32 to execute it. 

At Step 403, the microcomputer A 3 retrieves the control 
program from the program rewrite unit 8 using the rewrite 
program to store it in the flash memory 31 (arrow 52 in FIG. 5). 
This enables the microcomputer A 3 to rewrite the control 
program before the microcomputer A 3 outputs the rewrite program 
and control program for the microcomputer B 4 . 

At Step 4 04, the microcomputer A 3 waits for a given 
period to determine whether the program rewrite unit 8 outputs a 
rewrite program, that is, whether a request for rewriting the 
control program for the microcomputer B 4 is outputted. When the 
program rewrite unit 8 outputs the rewrite program, the 
processing proceeds to Step 405. Here, the microcomputer A 3 
executes the transfer routine included in the rewrite program to 
transfer the rewrite program to the microcomputer B 4. By 
contrast, when the program rewrite unit 8 outputs no rewrite 
program, the processing is then terminated. 

At Step 406, the microcomputer B 4 retrieves the rewrite 
program outputted from the microcomputer A 3 using the boot 
program to store it in the RAM 42. The microcomputer B 4 further 
invokes and executes the rewrite program (arrow 53 in FIG. 5). 



At Step 4 07 , the microcomputer A 3 retrieves the control program 
outputted from the program rewrite unit 8, to output it to the 
microcomputer B 4. At Step 4 08, the microcomputer B 4 retrieves 
using the rewrite program the control program outputted from the 
5 microcomputer A 3 and stores it in the flash memory 41 (arrow 54 
in FIG. 5) . 

Thus, in this processing system of the present 
invention, a rewrite program for the microcomputer A 3 has a 
transfer routine for transferring a rewrite program for the 

10 microcomputer B 4 to the microcomputer B 4. When the program 
rewrite unit 8 outputs a rewrite program for the microcomputer B 
4, the microcomputer A 3 executes the transfer routine to 
transfer the rewrite program for the microcomputer B 4 to the 
microcomputer B 4. This structure eliminates the need of the 

15 modification of the boot program, being applied to various 
conditions or applications. For instance, a boot program of each 
microcomputer thereby needs to be not modified so that a flash 
memory storing the boot program of the microcomputer can be 
replaced with a mask ROM or the like. This also enables the boot 

20 program to be simplified. 

(Modification) 

A modification of the above embodiment will be explained 
below. This modification has a feature enabling rewriting of 
only a control program for the microcomputer B 4 . 
25 A program rewrite unit 8 of this modification attaches, 

to a given program, a label indicating whether the given program 
is a rewrite program for a microcomputer B 4 when the program 



rewrite unit 8 outputs control programs or rewrite programs for 
microcomputers. When only a control program for the 

microcomputer B 4 is rewritten, the program rewrite unit 8 
outputs a rewrite program and control program for the 
5 microcomputer B4 after it outputs a rewrite program for the 
microcomputer A3, as shown in FIG- 6. Here, other functions are 
same as that of the f orementioned embodiment/ so that 
explanation will be eliminated. 

Processing of this modification will be explained with 

10 reference to FIG. 7. Here, the control programs for the 
microcomputer A 3 and the microcomputer B 4 are rewritten. This 
flowchart has an additional processing at Step 703 in FIG. 7 in 
comparison with the flowchart in FIG. 4. In detail, at Step 7 03, 
it is determined which program is outputted, a rewrite program 

15 for the microcomputer B or a control program for the 
microcomputer A 3. Other processings of the modification are 
same as that shown in FIGs. 3, 4, so that explanation will be 
eliminated. 

Again, at Step 703, the microcomputer A 3 determines 
20 which program is outputted, a rewrite program for the 
microcomputer B or a control program for the microcomputer A 3 . 
This determination is executed by referring to a label being 
attached to an outputted program. When the control program for 
the microcomputer A 3 is outputted, the processing proceeds to 
25 Step 704, where the retrieved control program is stored in the 
flash memory 31. By contrast, when the rewrite program for the 
microcomputer B 4 is outputted, the processing proceeds to Step 
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706 , where the microcomputer A 3 executes a transfer routine to 
transfer the retrieved rewrite program to the microcomputer B 4. 
This structure enables only a control program for the 
microcomputer B 4 to be rewritten. 
5 It will be obvious to those skilled in the art that 

various changes may be made in the above-described embodiments 
of the present invention. However, the scope of the present 
invention should be determined by the following claims . 
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